Privacy Policy

Kurisusan LLC (合同会社くりすさん, "we") handles your personal information as set out below, in accordance with Japan's Act on the Protection of Personal Information (APPI).

What we collect

We collect the following personal information, in these situations:

Contact form: your name, email address, preferred contact method and its ID (LINE, Instagram, WhatsApp and so on), preferred session, location, dates, time of day and party size, and your message
Booking and shooting: your name, email address, phone number, Instagram account, the date, time and place of the shoot, and the record of fees and payments
The photographs: the images created during the shoot, which include your face
Photo collection page: the code you enter, an Instagram account or email address if you choose to give one, and whether you agree to your photos being featured
Site analytics: the pages viewed, language, country, device type and the host name of the referring site

Our own analytics collect no IP address, no cookie and no identifier.

Why we use it

To answer your enquiry and stay in contact with you
To arrange and carry out the shoot and deliver the photographs
To invoice for and keep track of payment
To keep records of our work and meet accounting and tax obligations
To understand how the site is used and improve it
Only where you have agreed, to show your photographs as work on our website and social media

Publishing your photographs

Where we want to show photographs from your shoot on our website, social media or other promotional material, we ask for your agreement separately and tell you exactly where they would appear. Agreeing is optional: if you do not agree, nothing changes about the shoot you booked or the number of photographs you receive. Where you do agree, we may give you additional photographs as a thank-you. Even after agreeing you can withdraw at any time, and we will remove the photographs promptly from anything we control. For a minor, we ask a parent or guardian to agree.

Sharing with others

We do not provide personal information to third parties without your prior consent, except where the law requires it. Finished photographs are delivered to the person who made the booking and to nobody else. What you then do with your own photographs, including sharing or publishing them, is yours to decide and yours to manage.

Service providers we use

We use the following services to run parts of the business. They handle your personal information only as far as is necessary, and we supervise them accordingly.

Service	What it handles	Processed in
Supabase	Customer details, enquiries, booking and payment records, photographs	Japan (Tokyo)
Vercel	Website delivery, contact form messages	United States
Resend	Name, email address, message	United States
Google Analytics	Site analytics	United States and other countries where the vendor has facilities
Google Calendar / Drive	Shoot schedule (name, date, place)	United States and other countries where the vendor has facilities
Square	Payment information	United States, Japan and others (not fully disclosed)

Transfers outside Japan

Our database and photo storage are located in Japan (Tokyo region). Of the services above, Vercel (Virginia, United States) and Resend (United States) handle personal information in the United States. Google (Analytics, Calendar and Drive) may handle it in the United States or any other country in which Google maintains facilities, under its data processing terms. Square uses cloud providers in the United States and Japan, but does not publish the full list of countries for security reasons, so the country cannot be identified. Where a country cannot be identified, that fact and the reason are stated above.

How we protect it

Personal information is stored with access controls. The admin area requires authentication, and the database uses row-level security to prevent unauthorised reading or changing. All traffic is encrypted. We never receive or store card numbers: payment happens directly on the payment provider's own page.

Cookies and analytics

Our own analytics use no cookies. We also use Google Analytics, which does use cookies. You can stop Google Analytics collecting your data using the opt-out add-on Google provides.

Access, correction and deletion

You may ask us to disclose, correct, add to, delete, stop using, or stop sharing your personal information. Contact us at the address below. Once we have confirmed your identity we will act promptly and in accordance with the law. There is no charge.

How long we keep it

Photographs are kept on an external SSD for about six months after the shoot and then deleted. Exceptionally good frames may be kept longer as portfolio work, within whatever consent you have given for publication. Enquiry, booking and payment records are kept for as long as they are needed and for the period the law requires. Tell us if you would like yours deleted.

Contact

For any question about how we handle personal information, or to make any of the requests above, please contact us here.

Business name: 合同会社くりすさん
Person responsible: Christopher Plesent（プレゼント・クリストファ）
Address: Moriki Mansion #310, 2-14-6 Honjo-higashi, Kita-ku, Osaka 531-0074, Japan
Contact email: kansaisnaps@gmail.com

Changes to this policy

We may revise this policy as the law or our business changes. Any revision will be published on this page.

Kansai Snaps.